Ensure startup parameters for the FTP daemon do not allow ANONYMOUS or INACTIVE keywords

CaoCấp 1Xem xét thủ côngibm-z

Mô tả

During initialization, the FTP daemon reads JCL keywords and configuration files to determine values for critical operational parameters. Inappropriate values could result in undesirable operations and degraded security. This exposure may result in unauthorized access impacting data integrity or the availability of some system services.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Request a copy of all JESJCL of all active site FTP server started tasks. Note: If an FTP server is inactive, review the procedure libraries defined to JES2 and locate the FTP JCL member. Verify that: The following DD statements appear: o SYSTCPD o SYSFTPD If a PARM parameter is specified on the EXEC statement, it must not contain: o The ANONYMOUS keyword or any of it's combinations o The INACTIVE keyword The following instructions are only applicable if a site uses AUTOLOG in any PROFILE.TCPIP TCP/IP profiles to start FTP servers. Request a copy of all ... (full steps: CIS section 6.2.2)

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

The site will need to follow their standard change management process for updating started task procedures to to add DD statements or update non-compliant PARM parameters. The site will need to follow their standard change management process for updating PROFILE.TCPIP TCP/IP profiles to remove non-compliant PARMSTRING parameters.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: ibm-znetwork
Tham chiếu: CIS IBM z/OS with RACF Benchmark v1.0.0 - 6.2.2 Ensure startup parameters for the FTP daemon do not allow ANONYMOUS or INACTIVE keywords